Privacy Policy

Last updated: 25 October 2026

This policy explains what personal data SpotU holds about you, why we hold it, who helps us process it, and the control you have over it.

What we collect

  • Account details — your email address and password (stored only as a secure hash), and your display name.
  • Profile information — your bio or "about me" text, profile picture, headline, location, skills, experience, website and any CV you choose to upload.
  • Content you upload — your videos and audio, plus their metadata such as title, description, category, thumbnail and upload date.
  • Scout and agent verification — to verify scout and agent accounts, we collect details such as your organisation, role, LinkedIn profile link, website or social media links, contact details and any references you give us. We use these only to verify your account and keep the verification record for the life of your account plus 12 months.
  • Activity on the site — saves, ratings, comments, messages you send, and view counts.
  • Technical data — IP address, browser and device type, approximate location derived from IP, and cookie identifiers.

Why we collect it

To create and secure your account, to show your profile and uploads to the people you want to reach, to host and stream your media, to run search and discovery features, to let members message each other, and to keep the platform safe by handling reports and abuse.

Our lawful bases are performance of our contract with you (running the account and its features), our legitimate interests (security, moderation, improving the service), and your consent where we ask for it, such as non-essential cookies.

Who processes your data for us

  • Supabase — database, authentication and file storage. Holds your account record, profile, and uploaded files such as profile pictures and CVs.
  • Mux — video and audio hosting, encoding and streaming. Holds your uploaded media and playback data.
  • Google Analytics — with your consent, measures visits and site use using device, browser and cookie information.
  • Meta Platforms — with your consent, Meta Pixel shares page visits and successful account creation, page URLs, IP address, browser/device information and advertising cookie identifiers with Meta for advertising measurement and optimisation on Facebook and Instagram. We do not send your email address, name, messages or uploaded content as matching data.

These providers act on our instructions under data processing agreements. Some processing may take place outside the UK, protected by appropriate safeguards such as standard contractual clauses.

We do not sell your data

SpotU does not sell your personal data. If you accept optional cookies, we share the advertising measurement data described above with Meta. Otherwise, we share data only with the service providers named above, or where we are legally required to — for example a lawful request from the police, or a report we must make to protect a child.

Cookies

We set essential session and login cookies so that signing in works and stays working between visits, and local browser storage to remember your cookie choice. These are required for the site to function.

Google Analytics and Meta Pixel load only after you click Accept. Reject leaves essential cookies only, and the site still works. Meta may set advertising cookies such as _fbp (typically up to three months) to measure advertising effectiveness and optimise ads. We show this choice to all visitors, including the UK and other regions requiring consent. Prior analytics-only acceptance does not count as advertising consent.

Use Cookie settings in the footer at any time to accept or reject optional cookies. Opening settings does not change your current choice. Reject stops future optional reporting immediately, including in other open tabs, and removes accessible analytics and Meta cookies; it cannot undo data already sent. We store a browser-specific visitor reference, the time, notice version and choice history locally to record consent and withdrawal. Clearing browser storage removes this record and asks for your choice again. Meta may associate received activity with your Meta account under its own privacy policy; you can also manage advertising preferences in your Facebook or Instagram account. See Meta’s Privacy Policy.

How long we keep it

We keep your account data while your account is open. If you delete your account, your profile and uploads are removed, with backups clearing shortly afterwards. We may retain a minimal record of serious rule-breaking, such as a ban, to stop repeat accounts.

Your rights under UK GDPR

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to have your data deleted, to restrict or object to certain processing, and to receive a copy of your data in a portable form. You can also withdraw consent for non-essential cookies at any time.

To exercise any of these rights — including deleting your account and data — email support@spotu.co.uk. We will respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk. We would appreciate the chance to put things right first.

Changes to this policy

We may update this policy as SpotU develops. The "last updated" date at the top will change, and we will highlight significant changes on the site.

Contact

Privacy questions and data requests: support@spotu.co.uk. See also our Terms of Service.